access_vm_images_from_other_projects.tf

locals {
  project_ids = [123456789012, 234567890123, 345678901234]
}

# Allow every other project access to GCE VM images in a central project
resource "google_project_iam_member" "image_user" {
  for_each = local.project_ids
  project = "tools-275721"
  role    = "roles/compute.imageUser"

  member = "serviceAccount:${each.value}@cloudservices.gserviceaccount.com"
}